-
Continue reading →: How to Tell If Your Team Is Using AI (And Why That’s Not the Real Problem)
How to Tell If Your Team Is Using AI (And Why That’s Not the Real Problem) Most managers are not actually worried about AI use itself — they are worried about not knowing it is happening. Unattributed AI use in reports, client emails, or code creates a visibility gap, and…
-
Continue reading →: ISO 27701: Privacy Information Management That Goes Beyond GDPR Paperwork
ISO 27701: Privacy Information Management That Goes Beyond GDPR Paperwork Most organisations can produce a privacy policy, a data protection impact assessment template, and a register of processing activities. Fewer can demonstrate that ISO 27701 privacy information management is actually happening — with clear ownership, ongoing monitoring, and evidence that…
-
Continue reading →: ISO 22000: Food Safety Management That Protects Your Brand as Much as Your Customers
ISO 22000: Food Safety Management That Protects Your Brand as Much as Your Customers A single food safety failure can end a business faster than almost any other kind of incident — recalls, media coverage, and lost retailer contracts happen in days, not months. Most food businesses already run HACCP,…
-
Continue reading →: ISO 37301: Compliance Management Beyond Ticking Legal Boxes | CAW Consultancy
ISO 37301: Compliance Management That Goes Beyond Ticking Legal Boxes Ask most businesses how they manage compliance and you’ll get a version of: “we follow the law, and legal/HR/finance deal with anything specific.” That’s not a system — it’s reactive firefighting dressed up as due diligence, and it tends to…
-
Continue reading →: ISO 27701: Extending Your ISMS to Cover Data Privacy | CAW Consultancy
ISO 27701: Extending Your ISMS to Cover Data Privacy If your business already holds ISO 27001, you’ve done the hard part — you have an information security management system (ISMS), a risk assessment process, and an audit trail of continual improvement. ISO 27701 takes that existing structure and extends it…
-
Continue reading →: ISO 20000 Tips: IT Service Management Made Simple | CAW Consultancy
ISO 20000 Tips: IT Service Management Made Simple If your business delivers IT services — whether internally to other departments or externally to clients — ISO 20000 IT service management is the standard that proves you do it properly. It’s less well-known than ISO 27001 or ISO 9001, but for…
-
Continue reading →: Modern Slavery Act Compliance for Supply Chains: A 2026 Guide | CAW Consultancy
Modern Slavery Act Compliance for Supply Chains: What’s Changing in 2026 For a decade, the Modern Slavery Act 2015 had a reputation problem: everyone agreed it mattered, but almost nothing happened if you ignored it. That’s about to change. A new Bill working through Parliament is set to turn a…
-
Continue reading →: Sustainability Reporting Rules Every UK Business Should Know | CAW Consultancy
Sustainability Reporting Rules Every UK Business Should Know Sustainability reporting has quietly gone from a niche concern for FTSE-listed giants to something almost every business owner has heard mentioned — usually with more anxiety than clarity. Understanding sustainability reporting rules UK is increasingly important, even for small businesses. The reality…
-
Continue reading →: Data Breach Response: Your First 72 Hours Under GDPR | CAW Consultancy
Data Breach Response: Your First 72 Hours Under GDPR It’s 8am on a Monday and someone tells you an email containing customer records went to the wrong recipient, or a laptop full of client files has gone missing. Your stomach drops — but what actually happens next matters far more…
-
Continue reading →: Right to Work Checks: A Step-by-Step Compliance Guide | CAW Consultancy
Right to Work Checks: A Step-by-Step Compliance Guide Few compliance obligations carry as much direct financial risk for small employers as right to work checks — and yet they’re often treated as a quick box-ticking exercise during onboarding, rather than the rigorous, evidence-based process the law actually requires. Getting it…
Hello,
I’m Craig
Welcome to the ISO and Compliance Blog. I have spent over 20 years in compliance, specialising in accreditation and business growth. I own a number of compliance related businesses including CAW Consultancy, Global ISO Services, CAW Digital, Screen my Staff and Fusion Consultancy Worldwide. This blog is designed to help SME’s on their journey to top notch compliance. Any questions feel free to drop me an email at Craig@CAWConsultancy.co.uk
Let’s connect
Join the fun!
Stay updated with our latest tutorials and ideas by joining our newsletter.
ISO & Compliance Blog 